CVE-2003-0650

Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. (dot dot) sequences in filenames in a .APK (Zip) file.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-08-27

Last modified

2024-08-08

Affected products

• Arcade (Gamespy)

References

• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0064.html
• http://marc.info/?l=bugtraq&m=105958779017085&w=2
• http://www.gamespyarcade.com/features/versions.shtml
• http://www.securityfocus.com/bid/8309